Description
ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message.
References
- 4542 vdb-entry
- 20020418 KPMG-2002013: Coldfusion Path Disclosure mailing-list
- coldfusion-dos-device-path-disclosure(8866) vdb-entry
- 20020418 [VulnWatch] KPMG-2002013: Coldfusion Path Disclosure mailing-list
- 3337 vdb-entry
- http://www.macromedia.com/v1/handlers/index.cfm?ID=22906